hidden-property

2 talks tagged with this topic.

Filters+

Loading filters…

1–2 of 2 talks · loading…

Sort

Main Stage·30 min

DEF CON
AppSec
Date: Aug 2020
Location: Online

Discovering Hidden Properties to Attack Node.js Ecosystem

Feng Xiao

Feng Xiao presents Hidden Property Abusing (HPA), a novel attack vector exploiting internal Node.js runtime properties to achieve arbitrary code execution.

nodejshidden-propertyjavascript+2

Main Stage·31 min

DEF CON
AppSec
Date: Aug 2020
Location: Online

Discovering Hidden Properties to Attack Node.js Ecosystem (Q&A)

Feng Xiao

Feng Xiao answers audience questions on Hidden Property Abusing (HPA), JavaScript runtime internals, and securing NPM libraries.

nodejshidden-propertyq-and-a+2